Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3338203d3e20323639343633.roa
File:                     323830343a363530343a3a2f33322d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          Dy9+9nOFJ/07WtxO8gJqyBo02zNY+hnoJ7IdSZo2Dpw=
Subject key identifier:   93:60:22:51:FE:B2:B9:8E:FD:56:07:A8:6E:B0:4F:53:12:E6:47:11
Certificate issuer:       /CN=C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D
Certificate serial:       6BC3B9AB29EBC46628A3D258EA2E605A08627889
Authority key identifier: C1:1E:FD:1F:1A:BD:FD:33:EA:5F:11:EE:A1:ED:23:00:84:2E:9A:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3338203d3e20323639343633.roa
Signing time:             Mon 01 Jul 2024 02:13:58 +0000
ROA not before:           Mon 01 Jul 2024 02:08:58 +0000
ROA not after:            Mon 30 Jun 2025 02:13:58 +0000
asID:                     269463
IP address blocks:        2804:6504::/32 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:b9:ab:29:eb:c4:66:28:a3:d2:58:ea:2e:60:5a:08:62:78:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D
        Validity
            Not Before: Jul  1 02:08:58 2024 GMT
            Not After : Jun 30 02:13:58 2025 GMT
        Subject: CN=93602251FEB2B98EFD5607A86EB04F5312E64711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:67:34:a2:06:4b:12:8d:de:70:ad:62:d3:
                    9d:87:99:33:2d:c5:57:85:9b:71:ef:84:a9:9f:83:
                    37:5c:4c:cb:b5:08:36:b8:d6:e2:fd:8f:ef:44:f1:
                    71:c4:b3:a1:5f:54:68:5b:62:1e:a2:39:74:cb:c8:
                    8f:c5:78:12:80:1c:23:1d:94:68:d6:1a:95:41:45:
                    32:4e:8b:c5:be:14:ff:6a:4d:59:81:4d:4c:29:c7:
                    14:1f:95:db:49:00:7b:64:a7:da:04:00:7e:ba:f8:
                    24:2a:48:e9:55:4f:2f:60:bb:43:7c:46:d5:af:9e:
                    c8:c8:36:f6:b6:ed:8d:16:48:f7:d5:66:17:4c:e1:
                    e2:1a:19:04:61:b8:f4:fb:e4:ce:ba:76:80:01:34:
                    7c:1d:aa:85:4a:67:51:02:07:4a:d4:35:77:7c:98:
                    bc:d2:07:76:32:b9:f8:3f:a7:0b:7f:0d:fb:80:a3:
                    99:a8:48:34:27:10:08:0d:4f:c9:19:c7:f0:46:78:
                    12:91:22:8c:39:38:0a:0a:b4:63:ef:95:36:1f:2b:
                    db:6f:ba:a2:c2:53:2d:b6:1e:5b:42:26:6e:7a:95:
                    a0:c4:89:7c:de:c6:6e:2a:0c:21:4d:f7:6d:bb:8e:
                    3a:1a:38:6d:51:05:02:f8:5a:ce:e5:b1:15:19:f7:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:22:51:FE:B2:B9:8E:FD:56:07:A8:6E:B0:4F:53:12:E6:47:11
            X509v3 Authority Key Identifier:
                keyid:C1:1E:FD:1F:1A:BD:FD:33:EA:5F:11:EE:A1:ED:23:00:84:2E:9A:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:57:75:fb:48:38:1b:0b:9b:c1:bb:23:b3:41:9f:7a:3f:
         6e:54:4b:b5:06:60:44:b0:a8:3f:02:db:b8:ab:8c:fb:c2:a2:
         94:cd:03:86:fe:ec:61:93:6f:0a:d4:82:80:f9:30:49:6a:02:
         1e:b1:40:67:35:af:a6:f0:95:fd:ca:a0:d0:9f:3f:18:b4:af:
         b4:4a:ce:a2:cc:8c:3a:bf:77:f0:dd:6f:1e:8e:da:d1:58:bd:
         1b:e4:fe:5b:69:1c:60:e0:b0:5a:92:ff:51:68:12:fc:fd:13:
         1a:da:0d:51:10:ee:94:94:58:2f:81:c0:67:b0:84:24:a9:0f:
         fd:3a:53:bf:8b:31:b4:9b:71:05:79:ec:ca:4d:b0:db:d0:21:
         43:bd:d0:0e:a0:b2:3b:ad:a7:3c:aa:9e:bc:21:e1:ce:e8:ac:
         65:46:47:e8:63:86:74:cf:0b:c5:7c:ef:e9:72:df:80:57:d2:
         81:ae:33:44:dc:0d:eb:6a:65:2f:43:89:51:6e:d7:03:20:0f:
         51:f0:fa:ed:d4:ba:7a:2f:49:0b:d5:f6:4c:6a:2d:d8:51:ac:
         7d:a2:ac:45:d4:14:65:60:31:94:a0:85:7b:a2:29:1c:c0:9d:
         6d:96:48:e2:67:1a:76:90:70:f5:8f:d6:7a:02:f1:b0:3a:54:
         06:8d:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:36 2025 by rpki-client